Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea8abab1-4d9c-4705-8dfe-51a8b646c25e/947f8277250abf317da018cf9aea6ccd5f1f8a8b.roa
File:                     947f8277250abf317da018cf9aea6ccd5f1f8a8b.roa (raw, json)
Hash identifier:          YtFMzhaGoI095w3tvBa/312nf/rdqhOLGzuTLTfQ94s=
Subject key identifier:   CD:28:A4:F8:0F:60:7E:34:6C:45:BE:F0:E6:89:A7:21:89:20:95:65
Certificate issuer:       /CN=0ca141578b36e92a727858f4d62234e0409392cc
Certificate serial:       0298C6
Authority key identifier: D3:90:A8:E6:AB:52:B2:6B:E4:9E:05:B8:E0:74:1A:C2:6C:21:C0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ca141578b36e92a727858f4d62234e0409392cc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea8abab1-4d9c-4705-8dfe-51a8b646c25e/947f8277250abf317da018cf9aea6ccd5f1f8a8b.roa
Signing time:             Wed 24 Mar 2021 14:41:19 +0000
ROA not before:           Wed 24 Mar 2021 14:41:19 +0000
ROA not after:            Tue 24 Mar 2026 14:41:19 +0000
asID:                     263238
IP address blocks:        177.53.212.0/22 maxlen: 24
                          2803:2810::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170182 (0x298c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ca141578b36e92a727858f4d62234e0409392cc
        Validity
            Not Before: Mar 24 14:41:19 2021 GMT
            Not After : Mar 24 14:41:19 2026 GMT
        Subject: CN=947f8277250abf317da018cf9aea6ccd5f1f8a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b2:70:63:39:80:70:43:02:dd:99:78:f0:ad:
                    07:4a:ac:d7:68:6e:f4:6b:86:56:03:eb:b1:a7:0e:
                    72:ac:4f:21:48:57:dc:0f:bb:7c:6e:26:6b:5b:5e:
                    f3:2c:f8:3c:17:39:c7:37:18:3f:ac:1d:67:8e:fb:
                    dd:99:02:49:35:6b:ff:36:e2:c5:b0:70:f9:e5:d4:
                    78:d7:ae:73:a0:66:1f:1a:de:25:4b:c1:e2:40:69:
                    7f:5e:8f:9d:6b:53:d8:fa:c3:ec:25:60:48:00:37:
                    b1:2f:4c:c1:2e:ef:f3:42:b2:38:a2:2c:e6:90:c0:
                    a7:47:d8:a0:f2:0e:71:ec:46:c3:3a:c3:7f:ff:7c:
                    07:d6:96:3e:00:67:9c:e4:7d:e5:d6:be:41:de:97:
                    9a:49:69:3d:57:dd:8e:56:d1:d1:6d:7c:97:fa:a2:
                    cb:bc:91:9f:18:bb:fc:0c:9a:e7:7e:1d:df:c1:00:
                    9d:11:d0:5b:83:bf:47:b3:83:bc:85:15:f4:99:2e:
                    e7:fb:64:ed:31:fc:9e:bc:f2:d6:2b:7a:72:43:7a:
                    b3:3d:81:ef:d1:25:56:14:6f:59:10:53:ff:02:3d:
                    07:89:49:36:da:ac:9a:13:9e:38:e5:36:e3:2d:ec:
                    47:f6:0a:0b:e9:83:f2:80:b7:32:5c:90:f8:ba:fd:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:28:A4:F8:0F:60:7E:34:6C:45:BE:F0:E6:89:A7:21:89:20:95:65
            X509v3 Authority Key Identifier:
                keyid:D3:90:A8:E6:AB:52:B2:6B:E4:9E:05:B8:E0:74:1A:C2:6C:21:C0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ca141578b36e92a727858f4d62234e0409392cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea8abab1-4d9c-4705-8dfe-51a8b646c25e/947f8277250abf317da018cf9aea6ccd5f1f8a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea8abab1-4d9c-4705-8dfe-51a8b646c25e/0ca141578b36e92a727858f4d62234e0409392cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.212.0/22
                IPv6:
                  2803:2810::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:3d:b7:02:51:35:41:9d:9a:1a:77:ff:fc:2f:4c:6b:46:f5:
         4f:2b:2c:30:f2:68:71:2d:1b:24:a9:e8:27:85:c1:92:6d:84:
         e0:05:dd:5d:dc:73:c5:f1:11:41:ea:2d:83:96:30:cf:58:b2:
         f9:5a:4d:f8:22:7a:69:d3:55:96:93:db:ad:12:ce:f0:af:36:
         12:8c:3a:93:43:75:3e:e0:03:f6:b7:b4:24:91:c6:b6:45:83:
         81:de:51:9c:7e:a2:73:26:29:c7:22:08:ad:3e:80:9f:05:f8:
         5b:42:06:ed:be:99:92:22:fa:b0:05:22:95:6c:32:80:ed:56:
         f7:b7:27:c8:21:95:55:f2:b1:4d:d0:33:5b:9e:b4:17:0c:a5:
         4f:10:df:0b:57:2d:4f:7a:72:04:ce:bf:0e:39:6c:70:7b:b1:
         47:8b:02:c3:b6:dc:f2:a2:a3:63:1b:e7:36:fa:2d:c4:01:b8:
         b4:ad:e2:08:74:29:3a:91:df:4f:c4:88:14:d6:43:46:9e:8c:
         9a:1c:fe:05:97:71:19:c8:e2:a7:51:7a:77:84:dd:03:08:df:
         64:7b:59:e1:c0:da:9f:6d:58:db:c9:6a:58:12:48:7f:9d:c1:
         78:1a:16:da:8a:d7:0e:12:fe:ba:45:a1:5f:fd:cb:5c:be:c2:
         83:0a:ad:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDApjGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBj
YTE0MTU3OGIzNmU5MmE3Mjc4NThmNGQ2MjIzNGUwNDA5MzkyY2MwHhcNMjEwMzI0
MTQ0MTE5WhcNMjYwMzI0MTQ0MTE5WjAzMTEwLwYDVQQDEyg5NDdmODI3NzI1MGFi
ZjMxN2RhMDE4Y2Y5YWVhNmNjZDVmMWY4YThiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgrJwYzmAcEMC3Zl48K0HSqzXaG70a4ZWA+uxpw5yrE8hSFfc
D7t8biZrW17zLPg8FznHNxg/rB1njvvdmQJJNWv/NuLFsHD55dR4165zoGYfGt4l
S8HiQGl/Xo+da1PY+sPsJWBIADexL0zBLu/zQrI4oizmkMCnR9ig8g5x7EbDOsN/
/3wH1pY+AGec5H3l1r5B3peaSWk9V92OVtHRbXyX+qLLvJGfGLv8DJrnfh3fwQCd
EdBbg79Hs4O8hRX0mS7n+2TtMfyevPLWK3pyQ3qzPYHv0SVWFG9ZEFP/Aj0HiUk2
2qyaE5445TbjLexH9goL6YPygLcyXJD4uv05zwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFM0opPgPYH40bEW+8OaJpyGJIJVlMB8GA1UdIwQYMBaAFNOQqOarUrJr5J4F
uOB0GsJsIcDTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGNhMTQx
NTc4YjM2ZTkyYTcyNzg1OGY0ZDYyMjM0ZTA0MDkzOTJjYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWE4YWJhYjEtNGQ5Yy00NzA1LThkZmUtNTFhOGI2
NDZjMjVlLzk0N2Y4Mjc3MjUwYWJmMzE3ZGEwMThjZjlhZWE2Y2NkNWYxZjhhOGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYThhYmFiMS00ZDljLTQ3MDUtOGRmZS01MWE4
YjY0NmMyNWUvMGNhMTQxNTc4YjM2ZTkyYTcyNzg1OGY0ZDYyMjM0ZTA0MDkzOTJj
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArE11DANBAIAAjAHAwUAKAMoEDANBgkqhkiG9w0BAQsFAAOC
AQEAbD23AlE1QZ2aGnf//C9Ma0b1TyssMPJocS0bJKnoJ4XBkm2E4AXdXdxzxfER
Qeotg5Ywz1iy+VpN+CJ6adNVlpPbrRLO8K82Eow6k0N1PuAD9re0JJHGtkWDgd5R
nH6icyYpxyIIrT6AnwX4W0IG7b6ZkiL6sAUilWwygO1W97cnyCGVVfKxTdAzW560
FwylTxDfC1ctT3pyBM6/DjlscHuxR4sCw7bc8qKjYxvnNvotxAG4tK3iCHQpOpHf
T8SIFNZDRp6Mmhz+BZdxGcjip1F6d4TdAwjfZHtZ4cDan21Y28lqWBJIf53BeBoW
2orXDhL+ukWhX/3LXL7CgwqtaA==
-----END CERTIFICATE-----